]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
virt: arm-cca-guest: TSM_REPORT support for realms
authorSami Mujawar <sami.mujawar@arm.com>
Thu, 17 Oct 2024 13:14:33 +0000 (14:14 +0100)
committerCatalin Marinas <catalin.marinas@arm.com>
Wed, 23 Oct 2024 09:19:33 +0000 (10:19 +0100)
commit7999edc484ca376f803562edb2d43ec921642c2a
tree882b3fd10fdfe39853326ace5fa23ddcff2c6c94
parent42be24a4178fe51e6f47d91d8621b2f53820f88b
virt: arm-cca-guest: TSM_REPORT support for realms

Introduce an arm-cca-guest driver that registers with
the configfs-tsm module to provide user interfaces for
retrieving an attestation token.

When a new report is requested the arm-cca-guest driver
invokes the appropriate RSI interfaces to query an
attestation token.

The steps to retrieve an attestation token are as follows:
  1. Mount the configfs filesystem if not already mounted
     mount -t configfs none /sys/kernel/config
  2. Generate an attestation token
     report=/sys/kernel/config/tsm/report/report0
     mkdir $report
     dd if=/dev/urandom bs=64 count=1 > $report/inblob
     hexdump -C $report/outblob
     rmdir $report

Signed-off-by: Sami Mujawar <sami.mujawar@arm.com>
Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com>
Signed-off-by: Steven Price <steven.price@arm.com>
Reviewed-by: Gavin Shan <gshan@redhat.com>
Link: https://lore.kernel.org/r/20241017131434.40935-11-steven.price@arm.com
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
drivers/virt/coco/Kconfig
drivers/virt/coco/Makefile
drivers/virt/coco/arm-cca-guest/Kconfig [new file with mode: 0644]
drivers/virt/coco/arm-cca-guest/Makefile [new file with mode: 0644]
drivers/virt/coco/arm-cca-guest/arm-cca-guest.c [new file with mode: 0644]